Portal
Forum
Devolutions Force
Hub Business
Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
Security & Compliance
DEVO-2024-0001
Summary
Remote Desktop Manager Windows is affected by a vulnerability.
Affected Products
Remote Desktop Manager Windows 2023.3.36.0 and earlier.
Change Log
2024-01-31 - Initial Publication
Severity
Medium
Products
Remote Desktop Manager
Fix Version
2023.3.37
Cross-site scripting (XSS) vulnerability in the entry overview tab
Description
Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry.
Remediation and Workarounds
Upgrade to Remote Desktop Manager 2023.3.37.0 or higher
Severity
4.8 Medium - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/U:Green
Affected Products
Remote Desktop Manager Windows 2023.3.36.0 and earlier
CVE(s)
CVE-2024-0589
